Eric Teubert Multi Feed Reader vulnerabilities

Latest Eric Teubert Multi Feed Reader CVEs

Newest publication first

1. CVE-2024-53718 WordPress Multi Feed Reader plugin <= 2.2.4 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

   Published 2024-12-02

   High·CVSS 7.1 EPSS 0.18%

   Cross-Site Request Forgery (CSRF) vulnerability in Eric Teubert Multi Feed Reader multi-feed-reader allows Stored XSS.This issue affects Multi Feed Reader: from n/a through <= 2.2.4.

2. CVE-2017-2195 Multi Feed Reader <= 2.2.3 - Authenticated SQL Injection

   Published 2017-06-09

   High·CVSS 8.8 EPSS 1.6%

   SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.